CVE-2026-64382

HIGH

8.8

CVSS Severity Score

EPSS Score0.1680%

EPSS Percentile6.41th

Published2026-07-25

Last Modified2026-07-27

Data SourcesNVDFIRST.org EPSS

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_open_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://git.kernel.org/stable/c/02bc2896bdc3e29362d6e40d404006944a159c25

🔗 https://git.kernel.org/stable/c/14498ff5ce0f272ce0ef988721413e06b7038972

🔗 https://git.kernel.org/stable/c/3196b5192f246df4272072f61a2f4a3e9967f55d

🔗 https://git.kernel.org/stable/c/b55e182f2324bc6a604c21a47aa6c448f719a532

🔗 https://git.kernel.org/stable/c/ff2d30927bc3bf3c629f0768d2068096e64ef5ce

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

Related Vulnerabilities